Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsCustomDetection.ReadWrite.AllApplicationAdmin consent
Read and write all custom detection rules
Allows the app to read and write custom detection rules without a signed-in user.
- Permission ID
- e0fd9c8d-a12e-4cc9-9827-20c8c3cd6fb8
- Catalog state
- Enabled
CustomDetection.ReadWrite.AllDelegatedAdmin consent
Read and write custom detection rules
Allows the app to read and write custom detection rules on behalf of the signed-in user.
- Permission ID
- c34088fb-0649-4714-af0b-bcbfec155897
- Catalog state
- Enabled
CustomSecAttributeAssignment.Read.AllApplicationAdmin consent
Read custom security attribute assignments
Allows the app to read custom security attribute assignments for all principals in the tenant without a signed in user.
- Permission ID
- 3b37c5a4-1226-493d-bec3-5d6c6b866f3f
- Catalog state
- Enabled
CustomSecAttributeAssignment.Read.AllDelegatedAdmin consent
Read custom security attribute assignments
Allows the app to read custom security attribute assignments for all principals in the tenant on behalf of a signed in user.
- Permission ID
- b46ffa80-fe3d-4822-9a1a-c200932d54d0
- Catalog state
- Enabled
CustomSecAttributeAssignment.ReadWrite.AllApplicationAdmin consent
Read and write custom security attribute assignments
Allows the app to read and write custom security attribute assignments for all principals in the tenant without a signed in user.
- Permission ID
- de89b5e4-5b8f-48eb-8925-29c2b33bd8bd
- Catalog state
- Enabled
CustomSecAttributeAssignment.ReadWrite.AllDelegatedAdmin consent
Read and write custom security attribute assignments
Allows the app to read and write custom security attribute assignments for all principals in the tenant on behalf of a signed in user.
- Permission ID
- ca46335e-8453-47cd-a001-8459884efeae
- Catalog state
- Enabled
CustomSecAttributeAuditLogs.Read.AllApplicationAdmin consent
Read all custom security attribute audit logs
Allows the app to read all audit logs for events that contain information about custom security attributes, without a signed-in user.
- Permission ID
- 2a4f026d-e829-4e84-bdbf-d981a2703059
- Catalog state
- Enabled
CustomSecAttributeAuditLogs.Read.AllDelegatedAdmin consent
Read all custom security attribute audit logs
Allows the app to read audit logs for events that contain information about custom security attributes, on behalf of the signed-in user.
- Permission ID
- 1fcdeaab-b519-44dd-bffc-ed1fd15a24e0
- Catalog state
- Enabled
CustomSecAttributeDefinition.Read.AllApplicationAdmin consent
Read custom security attribute definitions
Allows the app to read custom security attribute definitions for the tenant without a signed in user.
- Permission ID
- b185aa14-d8d2-42c1-a685-0f5596613624
- Catalog state
- Enabled
CustomSecAttributeDefinition.Read.AllDelegatedAdmin consent
Read custom security attribute definitions
Allows the app to read custom security attribute definitions for the tenant on behalf of a signed in user.
- Permission ID
- ce026878-a0ff-4745-a728-d4fedd086c07
- Catalog state
- Enabled
CustomSecAttributeDefinition.ReadWrite.AllApplicationAdmin consent
Read and write custom security attribute definitions
Allows the app to read and write custom security attribute definitions for the tenant without a signed in user.
- Permission ID
- 12338004-21f4-4896-bf5e-b75dfaf1016d
- Catalog state
- Enabled
CustomSecAttributeDefinition.ReadWrite.AllDelegatedAdmin consent
Read and write custom security attribute definitions
Allows the app to read and write custom security attribute definitions for the tenant on behalf of a signed in user.
- Permission ID
- 8b0160d4-5743-482b-bb27-efc0a485ca4a
- Catalog state
- Enabled
CustomSecAttributeProvisioning.Read.AllApplicationAdmin consent
Read the provisioning configuration of all active custom security attributes
Allows the app to read the provisioning configuration of all active custom security attributes without a signed-in user.
- Permission ID
- 9fd1f8bf-a443-4df6-bc2a-5d00c5ec7828
- Catalog state
- Enabled
CustomSecAttributeProvisioning.Read.AllDelegatedAdmin consent
Read the provisioning configuration of all active custom security attributes
Allows the app to read the provisioning configuration of all active custom security attributes on behalf of a signed in user.
- Permission ID
- 9ddd870d-077c-49e7-b3e3-6b3012a8a880
- Catalog state
- Enabled
CustomSecAttributeProvisioning.ReadWrite.AllApplicationAdmin consent
Read and edit the provisioning configuration of all active custom security attributes
Allows the app to read and edit the provisioning configuration of all active custom security attributes without a signed-in user.
- Permission ID
- 1db69e9c-8d0a-498d-a5df-11fd0b68ceab
- Catalog state
- Enabled
CustomSecAttributeProvisioning.ReadWrite.AllDelegatedAdmin consent
Read and edit the provisioning configuration of all active custom security attributes
Allows the app to read and edit the provisioning configuration of all active custom security attributes on behalf of a signed in user.
- Permission ID
- 1140d9e4-6776-433e-a9e4-b9831adbb2e0
- Catalog state
- Enabled
CustomTags.Read.AllApplicationAdmin consent
Read all custom tags data
Read custom tags data, without a signed-in user
- Permission ID
- ab8a5872-7c88-47a6-8141-7becce939190
- Catalog state
- Enabled
CustomTags.Read.AllDelegatedAdmin consent
Read all custom tags data
Read custom tags data on behalf of the signed-in user
- Permission ID
- de6ea87d-10bd-467c-8682-d525a0c61b89
- Catalog state
- Enabled
CustomTags.ReadWrite.AllApplicationAdmin consent
Read and write custom tags data
Read and write custom tags data, without a signed-in user
- Permission ID
- 2f503208-e509-4e39-974c-8cc16e5785c9
- Catalog state
- Enabled
CustomTags.ReadWrite.AllDelegatedAdmin consent
Read and write custom tags data
Read and write custom tags data on behalf of the signed-in user
- Permission ID
- 2f1bbe0a-f34b-4efb-9edb-8db8dcb50eca
- Catalog state
- Enabled
DelegatedAdminRelationship.Read.AllApplicationAdmin consent
Read Delegated Admin relationships with customers
Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups without a signed-in user.
- Permission ID
- f6e9e124-4586-492f-adc0-c6f96e4823fd
- Catalog state
- Enabled
DelegatedAdminRelationship.Read.AllDelegatedAdmin consent
Read Delegated Admin relationships with customers
Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on behalf of the signed-in user.
- Permission ID
- 0c0064ea-477b-4130-82a5-4c2cc4ff68aa
- Catalog state
- Enabled
DelegatedAdminRelationship.ReadWrite.AllApplicationAdmin consent
Manage Delegated Admin relationships with customers
Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships without a signed-in user.
- Permission ID
- cc13eba4-8cd8-44c6-b4d4-f93237adce58
- Catalog state
- Enabled
DelegatedAdminRelationship.ReadWrite.AllDelegatedAdmin consent
Manage Delegated Admin relationships with customers
Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers as well as role assignments to security groups for active Delegated Admin relationships on behalf of the signed-in user.
- Permission ID
- 885f682f-a990-4bad-a642-36736a74b0c7
- Catalog state
- Enabled
DelegatedPermissionGrant.Read.AllApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 81b4724a-58aa-41c1-8a55-84ef97466587
- Catalog state
- Enabled